|
| 1 | +--- |
| 2 | +title: Install the Defender for Cloud CLI |
| 3 | +description: Learn how to download and install the Defender for Cloud CLI on Windows, macOS, and Linux. |
| 4 | +author: Elazar |
| 5 | +ms.author: elkrieger |
| 6 | +ms.topic: how-to |
| 7 | +ms.date: 01/08/2026 |
| 8 | +# customer intent: As a developer or security engineer, I want to install the Defender for Cloud CLI so I can run security scans locally and in CI/CD pipelines. |
| 9 | +--- |
| 10 | + |
| 11 | +# Install the Defender for Cloud CLI |
| 12 | + |
| 13 | +This article explains how to download and install the Defender for Cloud CLI on supported operating systems. |
| 14 | + |
| 15 | +## Download the CLI |
| 16 | + |
| 17 | +The Defender for Cloud CLI is distributed as a standalone executable. Download the binary that matches your operating system and CPU architecture. |
| 18 | + |
| 19 | +| Operating system | Architecture | Download | |
| 20 | +|---|---|---| |
| 21 | +| Windows | x64 (64-bit) | [Download for Windows x64](https://aka.ms/defender-cli_win-x64) | |
| 22 | +| Windows | x86 (32-bit) | [Download for Windows x86](https://aka.ms/defender-cli_win-x86) | |
| 23 | +| Windows | ARM64 | [Download for Windows ARM64](https://aka.ms/defender-cli_win-arm64) | |
| 24 | +| macOS | Apple silicon (M-series) | [Download for macOS ARM64](https://aka.ms/defender-cli_osx-arm64) | |
| 25 | +| macOS | Intel | [Download for macOS x64](https://aka.ms/defender-cli_osx-x64) | |
| 26 | +| Linux | x64 | [Download for Linux x64](https://aka.ms/defender-cli_linux-x64) | |
| 27 | +| Linux | ARM64 | [Download for Linux ARM64](https://aka.ms/defender-cli_linux-arm64) | |
| 28 | + |
| 29 | +## Set execution permissions (Linux and macOS) |
| 30 | + |
| 31 | +On Linux and macOS, you must grant the downloaded binary permission to run. |
| 32 | + |
| 33 | +From the directory that contains the downloaded file, run: |
| 34 | + |
| 35 | +```bash |
| 36 | +chmod +x defender |
| 37 | +``` |
| 38 | + |
| 39 | +> [!TIP] |
| 40 | +> On macOS, you might see a **Developer cannot be verified** warning when running the CLI for the first time. To allow the binary, go to **System Settings** > **Privacy & Security**, and then select **Open Anyway**. |
| 41 | +
|
| 42 | +## Add the CLI to your PATH (recommended) |
| 43 | + |
| 44 | +Adding the CLI to your system PATH lets you run the `defender` command from any directory. |
| 45 | + |
| 46 | +### Linux and macOS |
| 47 | + |
| 48 | +Move the binary to a directory that’s already included in your PATH, such as `/usr/local/bin`: |
| 49 | + |
| 50 | +```bash |
| 51 | +sudo mv defender /usr/local/bin/defender |
| 52 | +``` |
| 53 | + |
| 54 | +### Windows |
| 55 | + |
| 56 | +1. Create a folder. |
| 57 | + For example, `C:\tools\defender` |
| 58 | + |
| 59 | +1. Move `defender.exe` into that folder. |
| 60 | + |
| 61 | +1. In Windows Search, select **Edit the system environment variables**. |
| 62 | + |
| 63 | +1. Select **Environment Variables**, then edit the **Path** variable under **System variables**. |
| 64 | + |
| 65 | +5. Add the path to the folder you created. |
| 66 | + For example, `C:\tools\defender` |
| 67 | + |
| 68 | +1. Save your changes. |
| 69 | + |
| 70 | +## Verify the installation |
| 71 | + |
| 72 | +Open a new terminal or command prompt window and run: |
| 73 | + |
| 74 | +```bash |
| 75 | +defender --version |
| 76 | +``` |
| 77 | +If the CLI is installed correctly, the command returns the current version. |
| 78 | + |
| 79 | +## Next steps |
| 80 | + |
| 81 | +- [Configure Defender for Cloud CLI authentication](defender-cli-authentication.md) |
| 82 | + |
| 83 | +- Review the [CLI command reference](/azure/defender-for-cloud/defender-cli-syntax) |
| 84 | + |
| 85 | +- [Integrate the CLI into CI/CD pipelines](/azure/defender-for-cloud/ci-cd-pipeline-scanning-with-defender-cli) |
0 commit comments